Mozilla Firefox MFSA has multiple vulnerabilities (CNVD-2017-04172)

Mozilla Firefox is an open source web browser. Multiple vulnerabilities exist in Mozilla Firefox. An attacker could use this vulnerability to bypass security restrictions to perform unauthorized operations, obtain sensitive information, execute arbitrary script code in the affected application's...

Multiple vulnerabilities in Mozilla Firefox/Thunderbird (CNVD-2017-04251)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the U.S. Thunderbird is a mail tool adapted from the mail widget of the Mozilla browser. Mozilla Firefox/Thunderbird has multiple vulnerabilities. An attacker can exploit the vulnerabilities to bypass security...

Apache NiFi Security Bypass Vulnerability

Apache NiFi is an automated solution for data transfer between systems. A security bypass vulnerability exists in Apache NiFi. An attacker could use this vulnerability to bypass security restrictions, perform unauthorized operations, and launch further attacks...

Microsoft Edge Security Bypass Vulnerability (CNVD-2017-03539)

Microsoft Edge is a web browser developed by Microsoft USA and is the default browser that comes with the Windows 10 operating system. A security restriction bypass vulnerability exists in Microsoft Edge. A remote attacker can exploit this vulnerability to bypass the same-origin policy and trick...

Multiple Unspecified Security Bypass Vulnerabilities in SAP HANA User Self Service Tools

SAP HANA is a suite of real-time data analytics platforms from Germany's SAP. Multiple unspecified security bypass vulnerabilities exist in SAP HANA User Self Service Tools. An attacker could use this vulnerability to bypass certain security restrictions and perform unauthorized operations...

Microsoft Edge Security Bypass Vulnerability (CNVD-2017-03534)

Microsoft Edge is a web browser developed by Microsoft USA and is the default browser that comes with the Windows 10 operating system. A security bypass vulnerability exists in Microsoft Edge. An attacker can exploit the vulnerability to trick users into loading malicious web pages to manipulate...

Multiple vulnerabilities in Mozilla Firefox/Thunderbird (CNVD-2017-04250)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the U.S. Thunderbird is a mail tool adapted from the mail widget of the Mozilla browser. Mozilla Firefox/Thunderbird has multiple vulnerabilities. An attacker can exploit the vulnerabilities to bypass security...

CVE-2016-8010

CVE-2016-8010 affects McAfee Application Control (MAC) v7.0 and earlier and McAfee Endpoint Security (ENS) v10.2 and earlier. Description: a vulnerability allows a local attacker to bypass local security protections via a command‑line utility. The connected documents confirm affected products and...

Microsoft Windows Device Guard CVE-2017-0007 Security Bypass Vulnerability

Description Microsoft Windows is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may aid in further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems...

Microsoft IE And Microsoft Edge Multiple Flash Player Vulnerabilities (3214628)

This host is missing a critical security update according to Microsoft Bulletin MS17-003. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Edge CVE-2017-0140 Security Bypass Vulnerability

Description Microsoft Edge is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks. Technologies Affected Microsoft Edge Recommendations Block external acces...

Microsoft Edge CVE-2017-0135 Security Bypass Vulnerability

Description Microsoft Edge is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks. Technologies Affected Microsoft Edge Recommendations Block external acces...

Zammad Security Bypass Vulnerability

Zammad is a web-based, open-source helpdesk/customer support system from the German company Zammad, with many features to manage customer communication through multiple channels such as phone calls. A security bypass vulnerability exists in Zammad. An attacker could exploit the vulnerability to...

Zammad Security Bypass Vulnerability (CNVD-2017-04305)

Zammad is a web-based, open-source helpdesk/customer support system from the German company Zammad, with many features to manage customer communication through multiple channels such as phone calls. A security bypass vulnerability exists in Zammad. A remote attacker could exploit the vulnerabilit...

Microsoft Edge CVE-2017-0066 Security Bypass Vulnerability

Description Microsoft Edge is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks. Technologies Affected Microsoft Edge Recommendations Block external acces...

Google Chrome < 57.0.2987.98 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 57.0.2987.98. It is, therefore, affected by multiple vulnerabilities as referenced in the 201703stable-channel-update-for-desktop advisory. - An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac,...

Microsoft Lync for Mac CVE-2017-0129 SSL Certificate Validation Security Bypass Vulnerability

Description Microsoft Lync for Mac is prone to a security-bypass vulnerability that affects the IP-HTTPS server component. Successful exploits may allow attackers to perform man-in-the-middle attacks or impersonate trusted clients, which will aid in further attacks. Technologies Affected Microsof...

KLA10985 Privilege escalation vulnerabilities in Windows kernel-mode drivers

Multiple cases of improper handling of objects in memory have been found in the Windows kernel-mode Win32k driver. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited remotely via a specially designed application by an attacker who has already...

Google Chrome < 57.0.2987.98 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 57.0.2987.98. It is, therefore, affected by multiple vulnerabilities as referenced in the 201703stable-channel-update-for-desktop advisory. - An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac,...

dnaLIMS Multiple Security Vulnerabilities

dnaLIMS is prone to the following security vulnerabilities: 1. A command-injection vulnerability 2. An directory traversal vulnerability 3. An insecure password storage vulnerability 4. A session-hijacking vulnerability 5. Multiple cross-site scripting vulnerabilities 6. A security bypass...